<html>
<head><meta charset="utf-8"><title>security backports · t-compiler/wg-llvm · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/187780-t-compiler/wg-llvm/index.html">t-compiler/wg-llvm</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/187780-t-compiler/wg-llvm/topic/security.20backports.html">security backports</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="198769298"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/187780-t-compiler/wg-llvm/topic/security%20backports/near/198769298" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nikomatsakis <a href="https://rust-lang.github.io/zulip_archive/stream/187780-t-compiler/wg-llvm/topic/security.20backports.html#198769298">(May 26 2020 at 14:26)</a>:</h4>
<p>So I saw the PR to backport security patches (<a href="https://github.com/rust-lang/llvm-project/issues/58">rust-lang/llvm-project#58</a>) -- this seems like a relatively low-risk thing to land, but are there outstanding concerns? (cc <span class="user-mention" data-user-id="133224">@Nikita Popov</span>)</p>



<a name="198770185"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/187780-t-compiler/wg-llvm/topic/security%20backports/near/198770185" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> bjorn3 <a href="https://rust-lang.github.io/zulip_archive/stream/187780-t-compiler/wg-llvm/topic/security.20backports.html#198770185">(May 26 2020 at 14:32)</a>:</h4>
<p>According to the PR description the mitigations are off by default.</p>



<a name="198802571"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/187780-t-compiler/wg-llvm/topic/security%20backports/near/198802571" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Nikita Popov <a href="https://rust-lang.github.io/zulip_archive/stream/187780-t-compiler/wg-llvm/topic/security.20backports.html#198802571">(May 26 2020 at 18:32)</a>:</h4>
<p>I went ahead and merged the PR. My only outstanding concern is yet another compile-time regression for debug builds (even if LVI load hardening is not used), but we can just see how large that is going to be for rustc and mitigate if necessary.</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>